QW
Product
qwik
10
CVEs
0
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 3Medium 4Low 0
Watch
Add qwik to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25148 | 6.1 | Feb 3 | Qwik SSR XSS via Unsafe Virtual Node Serialization Affected: < 1.19.0 |
| CVE-2026-25149 | 6.1 | Feb 3 | Qwik City Open Redirect via fixTrailingSlash Affected: < 1.19.0 |
| CVE-2024-41677 | 6.1 | Aug 6 | Cross-site Scripting (XSS) vulnerability due to improper HTML escaping in qwik Affected: @builder.io/qwik: < 1.7.3; qwik: < 1.6.0 |
| CVE-2026-25151 | 5.9 | Feb 3 | Qwik City has a CSRF Protection Bypass via Content-Type Header Validation Affected: < 1.19.0 |
Showing 4